General
- Target steam.exe
- Size 5.5MB
- Sample260802-npbzbahd26
- SHA256 eb823470675e0a8f8b91c4f4f1e4bb6148e72b606a518f250a10c598bb1705b8
- MD5 dbc0570e201d61cc224c6bd8d92eec54
- SHA1 2c24cfc3d03811424f9fa10b6bacd273ad392e18
- SHA512 096809bbd94a1df5a216c629e723e8cd3c2d23e166a7beaac6e41cdb612327912ed73507829a8ca2e9d6f3b9a00773c8fe2ddda6bb4e30c4cc40f856092016a8
- SSDEEP 49152:HGtlqBJkIU6iYVwASOnMs2IAlheHaEXMQVkWw95jpBcrhUpPWPKV1/fqNcx/O5ke:3l+0x9FjO509oZqNcxfH64NWg/29z4VE
- TLSH T123469D56A6A450ECD5B7C178CA468617E7F2BC0513719BCF06A0A67A1F33AE12F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
steam.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
steam.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target steam.exe
- Size 5.5MB
- SHA256 eb823470675e0a8f8b91c4f4f1e4bb6148e72b606a518f250a10c598bb1705b8
- MD5 dbc0570e201d61cc224c6bd8d92eec54
- SHA1 2c24cfc3d03811424f9fa10b6bacd273ad392e18
- SHA512 096809bbd94a1df5a216c629e723e8cd3c2d23e166a7beaac6e41cdb612327912ed73507829a8ca2e9d6f3b9a00773c8fe2ddda6bb4e30c4cc40f856092016a8
- SSDEEP 49152:HGtlqBJkIU6iYVwASOnMs2IAlheHaEXMQVkWw95jpBcrhUpPWPKV1/fqNcx/O5ke:3l+0x9FjO509oZqNcxfH64NWg/29z4VE
- TLSH T123469D56A6A450ECD5B7C178CA468617E7F2BC0513719BCF06A0A67A1F33AE12F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2